CVE-2011-1269

EPSS 14.88%
Veröffentlicht 13.05.2011 17:05:41
Zuletzt bearbeitet 16.06.2026 23:29:03
Erkennungen
Login

Microsoft PowerPoint 2002 SP3, 2003 SP3, and 2007 SP2; Office 2004 and 2008 for Mac; Open XML File Format Converter for Mac; and Office Compatibility Pack for Word, Excel, and PowerPoint 2007 File Formats SP2 make unspecified function calls during file parsing without proper handling of memory, which allows remote attackers to execute arbitrary code via a crafted PowerPoint document, aka "Presentation Memory Corruption RCE Vulnerability."

Betroffene Produkte Warnungen 0 Metriken 2 CWE 1 Referenzen 5

NVD 7 VulnDex Vulnerability Enrichment 0

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Microsoft ≫ Office Version 2004 Edition mac

Microsoft ≫ Office Version 2008 Edition mac

Microsoft ≫ Office Compatibility Pack Version 2007 Update sp2

Microsoft ≫ Open Xml File Format Converter Edition mac

Microsoft ≫ Powerpoint Version 2002 Update sp3

Microsoft ≫ Powerpoint Version 2003 Update sp3

Microsoft ≫ Powerpoint Version 2007 Update sp2

Zu dieser CVE wurde keine Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	14.88%	0.963

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
NIST	9.3	8.6	10	AV:N/AC:M/Au:N/C:C/I:C/A:C

CWE-20 Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

https://docs.microsoft.com/en-us/security-updates/securitybulletins/2011/ms11-036

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12438

https://nvd.nist.gov/vuln/detail/CVE-2011-1269

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2011-1269

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2011-1269

EUVD

Team-orientierte Vulnerability Management Plattform

Features der Plattform

CVE-2011-1269